From 2e14d2fec1e300ad3515ebb09a59df5895eecbc9 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 14 Mar 2024 10:08:36 -0400 Subject: [PATCH] chore: tidy up index.html (#133) Co-authored-by: darktears --- index.html | 66 +++++++++++++++++++++++++++++------------------------- 1 file changed, 35 insertions(+), 31 deletions(-) diff --git a/index.html b/index.html index 0050d94..88ecd74 100644 --- a/index.html +++ b/index.html @@ -96,7 +96,8 @@ } - +

This document specifies an API that allows web applications to request @@ -381,10 +382,11 @@

instance, a device might not yield exactly 180° when laying flat, but instead values ranging from 175° to 185°. Device makers SHOULD make sure that the physical device postures map correctly to the postures - defined by this specification. Device makers are also allowed to determine - the posture using more sensors than just the hinge angle. For example, - they can also detect if keyboard is docked on the bottom half of the screen - or not. Another example is to detect whether the kickstand is deployed or not. + defined by this specification. Device makers are also allowed to + determine the posture using more sensors than just the hinge angle. For + example, they can also detect if keyboard is docked on the bottom half + of the screen or not. Another example is to detect whether the + kickstand is deployed or not.

Some devices might also lack one or more of the postures due to @@ -530,26 +532,27 @@

Security Considerations

- No new security considerations have been reported on this specification. + No new security considerations have been reported on this + specification.

-
+

Privacy considerations

- The Device Posture API exposes a posture determined from the hinge - angle sensor, but additional data can be used to determine the posture - such as whether the keyboard is attached or not, whether the + The Device Posture API exposes a posture determined from the + hinge angle sensor, but additional data can be used to determine the + posture such as whether the keyboard is attached or not, whether the kickstand is deployed or not, etc.

- Device Posture exposes high level concept and not sensor values - making fingerprinting possibilities more limited. Changing - posture is a physical manipulation done by the user. The frequency of - the posture changes are low, users do not constantly adjust the angle, - and even if they do the posture will only be changed in certain - scenarios as described in [=posture values table=]. + Device Posture exposes high level concept and not sensor values making + fingerprinting possibilities more limited. Changing posture is a + physical manipulation done by the user. The frequency of the posture + changes are low, users do not constantly adjust the angle, and even if + they do the posture will only be changed in certain scenarios as + described in [=posture values table=].

@@ -563,27 +566,28 @@

If this API can be used simultaneously in different window contexts - on the same device it may be possible for that code to correlate - the user across those two contexts, creating unanticipated - tracking mechanisms. However, because the posture value is typically - stable for a long time it could only be used to verify that two users - are not the same, but it would not help to identify a given user given - the fact that there are multiple types and models of foldable devices. + on the same device it may be possible for that code to correlate the + user across those two contexts, creating unanticipated tracking + mechanisms. However, because the posture value is typically stable + for a long time it could only be used to verify that two users are + not the same, but it would not help to identify a given user given + the fact that there are multiple types and models of foldable + devices.

- This API's entropy is comparable to the - pointer - API which tells whether the user's primary input is touch-based or not. - However, the primary input can change on devices where - the keyboard can be removed/added or the tablet mode is activated/deactivated. + This API's entropy is comparable to the pointer API which tells + whether the user's primary input is touch-based or not. However, the + primary input can change on devices where the keyboard can be + removed/added or the tablet mode is activated/deactivated.

-

- iframes + iframes

- iframes have access to the posture through this API and therefore could use - this information to identify users as mentioned in [[[#identifying-users-across-contexts]]]. + iframes have access to the posture through this API and therefore + could use this information to identify users as mentioned in + [[[#identifying-users-across-contexts]]].